PostQuantum Cryptography - Consultant

Post-Quantum Cryptography (PQC) Consultant
New York, NY - Hybrid
12 months+

Role Summary:
Supports enterprise readiness for post-quantum cryptography by identifying cryptographic risk, inventorying quantum-vulnerable algorithms, and enabling a structured transition to quantum-resistant cryptography across security, infrastructure, and application environments.

Key Responsibilities:
1) Assess PQC readiness across PKI, IAM, applications, infrastructure, and data-in-transit use cases.
2) Validate cryptographic assets (certificates, keys, cipher suites) vulnerable to quantum threats. Work alongside the Centralized Encryption Key project members.
3) Support development of PQC roadmaps, crypto-agility strategies, and prioritized remediation plans.
4) Assist with PQC vendor evaluations, requirements definition, and comparative analysis.
Translate technical findings into risk-based insights for security leadership and governance forums.
5) Align PQC activities with security architecture, risk management, and regulatory expectations.

Skills & Experience:
1) Strong foundation in applied cryptography (PKI, TLS, key management, certificates).
2) Working knowledge of post-quantum cryptography concepts and NIST PQC standards.
3) Experience with enterprise security architecture, cryptographic inventory, or certificate lifecycle management.
4) Ability to operate in complex, regulated environments and communicate clearly with technical and non-technical stakeholders.
5) Experience supporting risk-based prioritization of cryptographic remediation
Familiarity with aligning PQC initiatives to security policies, cryptographic standards, and change management processes
6) Awareness of third-party and supply-chain cryptographic risk considerations